{VsfXMisot>'Otli(.o \dUM\>if itih 12, 2(t0f-, 
'\niondnionls to the CJajms 

1 his listing ot claims will lepUico all pnoj versions, and listings,, of daims in the 

applicalioij; 

yMtog.of.Ciairns : 

1 (eunentK Jiuefuifd) \u appji lUli^ .UjiHMtig Soi tiie d\ nanuc jlit^x jtu^n n(=t'i\ k 
rt'souicos jmong a pluial1t^ !>r users, comprising 

a pai'titit~>n object spaco stirring a pluivi!itv ot poifition objects, the plurahf\' t->t 
pjrUtiOii objects iiKSuduig at ioast oiie d\ iuinnc parhUtm object ha\ ing at least tme 
alli'ibute defining a fjist aiiocation ot a netwoik rcsoui cv acrtjs*; aii data tiow ^ 
ccn responding to the at ieasl oiiedvnanin partUion, and a si>t cind attnbute ;.le}ining 
al!oralK>ns ot thenetuoik resoLiue withii) the iirsJ aOowition, and at least one nser 
pat titfon (,>bje( t ha^'^^g af least one atttfbiife dctttifng ati allocation the tieiworl 

res(,>u!ce across all data }lo\^-, t orre^pt^xiding to a user, 

a partition inanagement module c"iperafn e to 

ide^t^f^ useis based f^n ot least one packet attribute ot packets m data 

flows: 

d\namicall\ Cieate a usei paitition object m the parUtiC>n object space m 
resp<.>nst> to an identitu ation o! ,\ new usei , v\hejein {he d\ nanucalK t ivate;.! usei 
pal titioi! ol^jecl mi. ludesan al!oratK>n of the network u'souuo accoidiiig to the set ond 
attribute, and 

a partttK'tungj inechanisni opeiabh coniKcied to a cottinuttift ation pafh k>r 
transmitting data pacfots between ||aj| thenotw!>rk resi-)uice and a plurohts ot 
respective users, 
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\\ herein the paititioning mochani^m iS tiporatix o to 
aw)CKite itser*^ \\)\h cuirespotulifv.^ u<^e{ paHitttvu (^bjoots, ami 
enkn^o Iho ft."^pet.Ji\ tMioUvo? i tesoutce j!1<.h j{ion<^ doliiied tn the 
d^Tiarn ic. an d. u ser partition ob|ect-S. 

2 (original) Hie a|■>patatu'^ oi 4 laun 5 vvtierLiti tlit paihtion manat^t-ment nuiiiuit. 
turther t->peiat!\ e to Jfictc inottiv o usor pai tifion objocts from the partitit~>n object ^paco 

3 {pie^ lOLjsh' aiiK'HtleJ) j he apparalu'^ ot claiii^ 1 w herojn the paitition ii^aiuigemont 
motliiL' (.)poiati\ u to ro<_Jaim iisoi paitition <.ibjo<_t'; from the partjtiOii object ^pace a^ 
rec.|Uired for new users, 

4. (ortgiaal) The apparatus of claim 2 wherein an inactive user partition object is 
identified in relaUon to a thresixikl period of inactivity. 

5. (original) The apparatus of claim 3 wherein an inactive user partition object is 
identified in relation to a threshold period of inactivit}-'. 

6. (canceSed) 

7 (pre\ iousi\ attiend^d) The apparatus ot ciant? I wlieiem eat li d\ nanuc partition 
object ts jwKjated witli a ^ha^aLter^'^tic ot tlie data packet-, transnufted tn tlie 
communication path, wheiem the partifjtMi management mocluio is opeiafi\ e f!> identitv 
the dvnamjc partition object associated \\ ith a data packet and create a coricspondmg 
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user partition object. 

S (onu'iUiv .unetulod) '\{! jp|V5j jtu-. alkn\ jn<; U)j thedvnauiit .illcx.UjotU)! iu-twtn k 

(,ipoidb!\ ^on net ted to a t.(,Miiputer netu ot k, CiMuprsMiig 

a partitk'U object ^pace stornig a pluraiitv oj pai titson oh^H i^, [he pluraiUy (,it 
partit!t~>n object'^ incKaiing at !oa'^t t->ne dynamic paitition t->bject and af icost ono usor 
partition obiect; 

a tuUtiC cKlss database ^lor^ng traffic classes in association w jth coi responding 
d\namic parlitjoa objects, 

v\ heiain \hv at !aj-.t osie dviiamu par tUion object has at least uiie attsibnts.' 
deiinjng a fiKst allocation ot a network fasouixs.' to a cof respuiiding tiaffic 
class and at l^ast one attnbutt. defining ,i set'ond allocation, vvitliiti t!K lirst 
allocation, of the network resource across all data fknvs corresponding to 
a user; 

w herein the at least (Mie user partition object has at least one attribute 
detming an allocation of the network iwsource to a user, 
a partitioning mechanism opeiabJv connected to the compntei network to 
receive an;.! tiansniit <.lata flouN the partitioning mechaniMi) lurther operative t<.>. 

alentilv a ne\v dala (low an;.! the tiaflii. class associated v\ith the data tlow; 

and, 

a partttit^in nuniageiuent module (,>perati\'e So, m response to a new data tknv: 

ide^tit^ the d^ namtc partition object associated with the traffic ckiss ot the 
new data flow; 
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identity a new Liser based on one or more attributes of at iecisl one packet 
of t.he data .flow; 

dvn;"iintca!lv create ;"i nser pi-irUtion objeci in ihe p.-.uiition object sp.-.K":e in 
response to an identificatioT) of a new rfser ;"iccc»rciing to the attr ibntes of 
the dynamic partition object associated with the new data flow; 
return the user partition object to the partitioning mechanism; 
^vherein the partitioning mechanism is further operati\'e to enforce the 

allocations defined in the nser partition objects to contro! access to the network resource 

among a plurality of users. 

9. (original) The apparatus of claim. 8 wherein the partition management moduie is 
further operabie tc> reclaim inactive partition c>bjects from the partition object space. 

10. (cLM'rentiy amended) An apparatus operable to dynarnicaHy aiiocate access to a 
network resource among a plurality of users, comprising: 

a partition management module operati\ e to 

identify new u.sers ba.sed on at least one attribtite of packets in data fiow.s; 
dynamicaSly create nser partition objects in a memory space supporting a finite number 
of partition c>bject.s in response to the new users, wherein the mem.c>rv space comprises 
a pim alitv of partition objects including at least one dynamic partition object having at 
least c>ne altribnte defining a first alkxattCMi of a network resorn'ce aa:oss a^^^^^^ 
<;".VIC.r.t-i>.p.Qilsli!.U?..tQ..f i.f^..;^..t^^ f"' '■I ^^'(^O} k{ a 1 1 r t bu te d ef i n t ri g 

allocations of the network resource within the first aliocation; 

wherein the dynamically-created user partition object is a child partition 
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of thct-KncMiiic pailiUctn obicxLjnti defines a {.MrUtion inciuthni; the soetinti 
jttf jbulo of tho d\ naniic porUtion object ior mcinaguig aggjogate bcinJw idth 
.jcfos-. jii tiata ikn\s^<.>i{s.-.|.)OiidHic; to a m\en usoi.and, 
J |.)a{{iUoiUfv.^ iiu\hjmsni opoj atn o lo i'nU»ue \hv pat UtiOiis ;.lefi!U<.l m ths. 

pajtilK'U objt-Cb it.) cotitjo! .Kce^s to {{-aW She net-\\o{k rL^uutL amont^a piuialiSy ot 

users. 

3 1 kuiiontlv amendod) A ompuki-implomi.nted method oHowmg tot dxnamjc 
alioeation ot a netw oi k rusouj e<- the method eompj issnv; the skps ot 

iecogniying a new usei oj a netnork lesouue based on one o\ nune attrfbut<-s of 
at !ea<^t one packet m a d jta tlow , 

acLe.sMng j memoi v spjt s. v.ompnMn^a pluf j!Uv ot pajtUion objeUs UKiiiding j 
d\nanue paitition ob|LLt h.i\ m^^^ at ttast oik attnbiite dehnuig a tnst allt^ieatKMi ot a 
net-\\otk fLsOLtit e acio^s al! dafa tlovvs l(,h j espoiidin^; io ttie at itast oiK dvtiamiL 
paitition, and a seond otti ihute detuimg usei paf tjtion aliocotions ot thi. notu oi k 
resouico \s ithfn file hrst aikKatum 

(.reating a uses par tit ton obiCi^t on JenianJ foi the new uses, wheiein theusei 
pal tjtion objei.t js tipeiable to allocate utj3i.--ation of the network lesouae, aci.ojding to 
the second attrd^iite ds. tuied in thed\njmjL paj tit ion obiei, t, acjos.sa!i ;.lata tlovs<^ 
cof I esponding to thenov. lisei, and, 

disposiiig of the user partition oyecLwhen no ionger needed. 

12. (currently amended) The method of claim 1 1 wherein the di.spO!>!ng step comprises 
the steps of 
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i oclaiming the ii<;or p.iiii Hon object for j stfb^cquent neu user if the user 
p.irUtiOn object is injcUxe. 

13. (currently amended) l;he method of cJaim 11 further comprising 

receiving a set of parameters defining the dyrsamic parti ti on . object 

\4. (currently amended) The method of claim 1 1 wherein the user partition object is 
configurobie based on a characteristic of the user's utilization of the network resource. 

15. (currently amended) The method of ciaim 1.1 wherein the user parti lion object is 
operable to provide a minimum aNocation of the network resoinxe to the new user. 

16. (currently amended) The method of claim 11 wherein the user parti ti on jjtsiect is 
operable to limit utilization of the network resource. 

i" (currenti) amended) The method of claim I i ulieiom the user paitifion object is 
unplementod b\ class-based uejghtetl tan queuing j'unclionaljtv 

IS (i, Lurentlv amende<.l) The method of >. iajm 1! u heu-ai the user paHUion ob|eiJ_is 
unplemented b\ committed access uUe f liui. tK>naiitv 

19. (canceled) 

20. (currently amended) A computer-implemented method ailowlng for dynamic 
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<.ilJ(t<_iL^lKin oj notwoik itsouj<-ts, the method compiisuig Uio stcp^ of 

al !easl onopjt ket iji j ;.kU.5 tlcnv, 

jnossiji^ .nnoj"!K^j\ s|V5ce (.otnpnsing J pluialih oi pjt Utic^n olijCcK ar lan^^Ov.! ui 
a hiouirLliKjl paiiitioti L(,MUiguuUioti, the pluuUitv ol pailUioii abje>.t!> nKkuiuig d 
dxnanuc p.ntition ob|LLi lun in^' jt StList ohl atinbiitf dt.hnmg a Inst jllt^ieatuMi ol a 
netw oi k f esi^uici. aci o^s ali data tkn\ ^ en i.spondmg to tho d\ namiv. pai tition, and o 
seond otti ihute dttaiing usoi paf t!tit~>n alkKations ot th<. not^xf^j k f esi^nici. w ifhin the 
first aJlocatlon; 

creating u^u^ paititionson demand foj now usess, w hoiom each usoi pastUion i^ 
a i.hHd pa? Ution oi a (.orfespcinduig ;.lvnannr pai Ution objeU_and uperabie to a!k)eato 
Litili/atu)n ut |[t+n ilio neU\of i rescmictv actoiding to the Lkser partition ailoealion 
detuitd bv fhe st^xind atiribiite, aeixiss al! data {-[(.^-ws eotrespondmg to a u'^t.r, and, 

fLLiainnng fnaetue ii^er paititfons Sot -,Lib-,ti.|aenf nt.\v nsLt^ 

21. (previously amended) The method of claim 20 wherein inactive user partitions are 
reck^imed when necessary for subsequent new users, 

22. (previously amended) 'The melhod of cSaini 20 wherein inactive user partitions are 
reclaimed au tomati caliy . 

23. {pre\'K>u-,]\' amended) Yhv mctlud ot ckinn 20 tutiher comprising the st^'ps (,>t 

recei\ ing a set ot paramoteiN defining the dynamic partition objecLand a 
partition cap parameter detmmg a dosirod limit on the number ot user partitions, and 
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\\ hcjoin the cicatirii; ^tep is conditioned on the number of existing user partitions 
not oM ootlnv^ \hv pji tttioii i.af> 

24 {piC. iou-.lv .u"!ii'iii.k\l) Ihi' tnethod oi Jaini 2^ iui thi't t.onif)nMn<; Iho sU'ps of 

rLLt.!\'Uig d sol ol pdr.iiueStLj^ detimn^' jn o\eiil(,iu pLUtitu^n, uliLivin tht. 
o\(mHo\\ pjj tilit^iii dftnit-s jii iK^gi't-gdte j[l(,it..iti(,Mi ol She net-\\ oi'k rL^UineKii data 
Wow s associated ^\ ith uscks assigned io ihv ovortlow paifitfon, af")d 

automaticaliv assigiung ne\s usci's it-) tho ox eifiow partition, it the number t->t 
usei paitUioi^s L'NCLV'ds the partition <_ap 

25 {ciiru-ntlx aniontit'd) A amiputai impiemanled method ai!o\\ ing ioi tivnamir 
al!or.UK>n of ne{\\oj k lescuiires, tha mathod conipi i.sing tha stt'p.s of 

ttvogtii/m^'j tit.\v u^Lts (,it a netuork rt-soarLt. !->astd on oiit Oj more aiiribiitts ot 
at Uwbt out. pael el tn Lt^n j espotiditig data How-,. 

accessing a partftiof) object space compnsifig a pkaalit^ or paftitii-)n obiocts 
airanged ma hioraichical partition contigurotion, the pkiioht\ ot partitioii objects 
mckidiiig 0 dx'nami<_ pai tition object hax ing at k'ost one otti ibute dctining a fast 
allocation ot a netwoik resouice as^ross ji! data tious ccuiesponding t<.i the at least oiie 
dvnanm paitition, aiid a -.econd jtti ibute deiuiii"!g usei paitition aNocatioi")-. of the 
netu oi k resouice \\ ithu! the first ai!ocatK>n, 

dvnannoailv 4-i-tatii-)g ust,r |:«i4i4H+H^ partition obj^ets tti tiit. pat tiSion i^b\iH i spjee 
on demand tor ltieut.\v users, uiKteiu eacii iiset partition objeet is a etiiki partition oS 
tho d) naiWe partition object and includes the sec!>nd atti ibute, 

enforcing the allocations defined in the dynamic and user partitions partition 
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obfOcK on daU^ tSows ti'cn Cfsirii; j nctwoik poth, 

moiiitoi iiiy, use of the uses patUUons p,\t {lUon objecls ; and, 

{(. I. Ljjnutig injt U\ e lise? pt i i Ution^ parlUton objects in the parlilion object .space 

tot su[''st\|itont tiew i!-,ojs j-. nootled 

26. (currently amended) A com puter-im piemen ted method tacililLUing the dynamic 
allocation of network rej^ourcej^, the method compri!>!ng the steps ot: 

recognizing o ne^v user bo&ed on one or more attributes of at least one packet in a 
data fbw; 

associating a traffic classification to the data flow; 

anessiji'^ a partition ul^jet t spjt o tompuMnj; a pknahtv oi pasJitKin ob5e;.ts 
aifani^td m a HiesaKhuai partition i,onSj^ujatu)n^ the phuahJx of partition ol^jett-. 
inciudiiu^ a dvnamit paj tilu-n objt.ci iiav in^^ at least (,>nt. aiirtbute detina^^ a tnst 
albxatiou ol a Uttvv(,>i I tes(,>u!ce and a set ond attnbiite dt.lii-)uig usei patiitioi") 
allocations of thi. netuoj k f esi>urte \\ ifiiui the tii st aik>tation, 

idi^ntit^ in^^j d\f")amic partition i>biect based on fiit tiatti*. ciassitiv^atfof) 
associated with the data fkn\ , 

eteatini; a use; paitition tibjeet on demand ten the n<_\\ nsci, nheicin the ustj 
pajtUion objci-t uiv.ln<.les jn alkxation of the netv\ofi lesciuue loi all data t!ov\-, 
con espondmg to the ns. u iisin act outing to the usCj paj tUion aik)v.atioi! <.leiined b\ the 
set oiul attribute (,>t tlit idetiiitied dvtiami^ pat liiion obn^ t 

asvKjaiiiivr tiit. ustLt pajtiltt^iti ob|t.ci uitii t!K data tkn\ , and, 

dispo^,ing ot the user pai tit!t->n object w hen nt-> l!>ng<.i needed 
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27. (cLirrently amended) The method of claim 26 wherein the di.<>pasing step comprises 
reciainiiT)g the user parjilioiJ objecl fo;; a subsequent new liser. 
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